CVE-2024-53388: mavo DOM Clobbering vulnerability

March 3, 2025 (updated October 31, 2025)

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element.

References

gist.github.com/jackfromeast/a61a5429a97985e7ff4c1d39e339d5d8
github.com/advisories/GHSA-3mf5-r4hg-hfx9
github.com/mavoweb/mavo
nvd.nist.gov/vuln/detail/CVE-2024-53388

Code Behaviors & Features

Detect and mitigate CVE-2024-53388 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →